splunk
Splunk Add-on for Microsoft Office 365
Splunk Cloud
Splunk Built
Overview
Details
The Splunk Add-on for Microsoft Office 365 allows a Splunk software administrator to pull service status, service messages, and management activity logs from the Office 365 Management API. You can collect:
* Audit logs for Azure Active Directory, Sharepoint Online, and Exchange Online, supported by the Office 365 Management API.
* Historical and current service status, and service messages for the corresponding Microsoft Office 365 Management API.
* Data Loss Prevention on Microsoft Office 365 Management API.
After the Splunk platform indexes the events, you can then directly analyze the data or use it as a contextual data feed to correlate with other data in the Splunk platform
* Audit logs for Azure Active Directory, Sharepoint Online, and Exchange Online, supported by the Office 365 Management API.
* Historical and current service status, and service messages for the corresponding Microsoft Office 365 Management API.
* Data Loss Prevention on Microsoft Office 365 Management API.
After the Splunk platform indexes the events, you can then directly analyze the data or use it as a contextual data feed to correlate with other data in the Splunk platform
Release Notes for this add-on are available at https://docs.splunk.com/Documentation/AddOns/released/MSO365/Releasenotes
Note: If you are running this add-on with Debian or Ubuntu Linux Server, you must set the option start_by_shell = false in each stanza of inputs.conf. See http://docs.splunk.com/Documentation/AddOns/released/MSO365/Troubleshooting
Release Notes
Version 4.7.0
Jan. 7, 2025
Version 4.6.0
Nov. 5, 2024
Version 4.5.2
Sept. 18, 2024
Version 4.1.1
Jan. 24, 2023
Version 4.2.1
Dec. 23, 2022